Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
File:                     9HOLangCORiAdDf6GQfEytcpPvk.mft (raw, json)
Hash identifier:          G5/NxPYcTA+XQQHWicPr70+mItJAOqUpPMlH5Tkk+Nk=
Subject key identifier:   14:7F:67:46:0B:CD:21:D5:7C:FD:01:99:30:5B:8D:3C:02:12:55:1C
Authority key identifier: F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9
Certificate issuer:       /CN=F3672E90AF/serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
Certificate serial:       06A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
Manifest number:          06A5
Signing time:             Tue 28 Jul 2026 02:36:22 +0000
Manifest this update:     Tue 28 Jul 2026 02:36:22 +0000
Manifest next update:     Thu 30 Jul 2026 02:36:22 +0000
Files and hashes:         1: 9HOLangCORiAdDf6GQfEytcpPvk.crl (hash: GiPCYkk6HzHLAQcRXc79zZbkSiWVx8BgulCmwy0Cfcg=)
                          2: 6A99DE584E7011F08BE3C38ADAE4EC9C.roa (hash: XsWgln8vG4e/xqc9ncPsPEMbepHsGpN9yBMj9MFLOwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 02:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672E90AF, serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
        Validity
            Not Before: Jul 28 02:36:22 2026 GMT
            Not After : Jul 30 02:36:22 2026 GMT
        Subject: CN=6a6815a6-3743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:a7:2f:46:89:45:6b:89:e7:e5:fa:b5:2f:
                    5e:4d:ba:f6:c3:1d:8d:2d:df:4d:ea:79:d2:57:ce:
                    f0:5e:ce:04:a9:90:98:a6:20:ed:00:80:43:8e:7f:
                    74:6b:87:f6:64:21:d2:a7:23:6e:b1:87:59:bd:10:
                    e0:a6:dc:11:28:10:1d:92:80:84:5e:8e:4b:9d:45:
                    38:f9:93:78:fc:19:63:fa:60:dd:4a:ba:bf:20:36:
                    3d:cb:f4:67:9f:51:83:33:7c:59:6d:8f:ec:b7:21:
                    73:40:50:59:8b:f5:6a:cf:b6:fb:0f:7c:ae:9a:3f:
                    ac:3a:cb:dc:19:2e:28:8e:2b:f1:1c:cf:d9:1e:52:
                    54:7a:af:78:14:bf:1c:6f:5f:85:50:62:c5:f0:d5:
                    12:0b:0a:72:3b:b0:9d:7d:9b:ea:86:c8:79:c2:e3:
                    19:15:05:c1:84:cd:6f:e5:eb:4e:23:ac:06:10:85:
                    0c:55:5e:81:9d:51:26:d0:75:2c:5f:79:a3:91:7c:
                    87:96:3a:39:0f:54:ac:c4:a4:97:3d:5a:82:18:48:
                    cf:5d:bb:82:b4:1d:f3:63:95:de:26:8d:73:84:aa:
                    fc:75:95:c1:23:a6:db:89:b5:9a:ac:e5:33:fa:fc:
                    6d:5d:a3:92:33:02:d3:07:14:dd:c6:29:6b:9e:5a:
                    74:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:67:46:0B:CD:21:D5:7C:FD:01:99:30:5B:8D:3C:02:12:55:1C
            X509v3 Authority Key Identifier:
                keyid:F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:85:bd:76:81:98:cc:57:a6:1e:6b:64:54:f9:a3:84:a2:0d:
         08:e7:1b:4e:12:3e:e5:38:84:c7:5b:6c:42:54:f8:09:61:e5:
         a7:62:fc:d3:28:ab:1a:43:a7:63:91:62:ab:89:d9:51:9d:09:
         96:a3:75:5c:64:91:fe:e4:5b:f1:08:98:66:ab:f8:4d:52:0b:
         ed:39:ca:73:fc:9c:8d:c3:94:e3:41:11:bd:41:9f:ea:c8:2e:
         b0:89:1d:95:cd:f0:dd:c7:39:05:54:3f:7a:f6:b0:06:d5:e3:
         e3:4f:88:51:c9:2e:f2:e3:d7:dc:1c:16:32:3e:ba:63:6b:aa:
         a2:b1:ca:18:5a:89:3e:ee:cf:67:81:f3:78:99:53:31:d9:31:
         fa:ca:be:2e:82:db:59:46:a4:09:e9:79:c8:a5:97:a2:00:43:
         1b:b6:85:5c:6e:37:38:b3:01:43:63:57:97:66:7a:19:65:ed:
         f6:73:b4:86:31:d6:05:ed:14:6e:56:82:a7:06:ae:ed:5e:3a:
         d7:25:25:0b:ca:43:a6:cf:e7:34:ae:ea:c5:cc:4e:45:94:f3:
         45:b5:a7:96:33:da:9f:81:68:8c:9f:ef:24:fd:81:c8:be:09:
         0b:27:f2:92:5f:97:b0:c5:92:c6:7b:fc:01:c1:de:aa:3e:30:
         76:6b:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:56 2026 by rpki-client